Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          3/sRb+Ovzku6xDsi/eqiTr4YEOhHuhjRhUlBOCRnNdk=
Subject key identifier:   DC:3D:89:75:7A:AC:AA:FD:A3:9E:94:A5:7B:B7:32:EC:AD:66:63:5C
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       6B29057FDAEE834D4FCA02358FC47061DA270791
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
Signing time:             Mon 05 Feb 2024 11:04:18 +0000
ROA not before:           Mon 05 Feb 2024 10:59:18 +0000
ROA not after:            Mon 03 Feb 2025 11:04:18 +0000
asID:                     262798
IP address blocks:        177.129.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:05:7f:da:ee:83:4d:4f:ca:02:35:8f:c4:70:61:da:27:07:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Feb  5 10:59:18 2024 GMT
            Not After : Feb  3 11:04:18 2025 GMT
        Subject: CN=DC3D89757AACAAFDA39E94A57BB732ECAD66635C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:bf:cb:e6:13:8a:dc:b6:4e:30:ac:24:1f:
                    46:8d:d8:49:e2:79:8a:3c:1a:85:e0:2f:a1:bc:33:
                    c8:18:e5:a9:f8:ac:f2:30:1a:c8:51:b3:de:ad:dd:
                    87:ff:71:f0:38:b8:ae:05:0a:af:02:c5:74:c9:67:
                    ec:d8:6a:53:b6:ea:d1:bd:f0:8a:32:b5:34:ed:57:
                    46:68:0d:d5:fd:89:d0:fb:0a:28:52:85:f7:44:df:
                    98:24:a9:3a:d4:68:82:89:cd:40:54:31:b7:42:4d:
                    a1:55:cb:d2:36:14:38:5f:f2:a0:17:2f:bf:58:f0:
                    8c:57:d2:fb:27:9b:b2:a9:b1:f9:f5:3c:78:d1:18:
                    d7:e7:13:bd:c2:1d:99:84:90:24:3a:08:4f:3b:70:
                    fb:58:7d:24:09:3b:7d:6e:3f:91:d5:cc:13:ed:24:
                    30:f0:8e:23:1b:9b:e8:c3:c8:b6:f7:30:22:f3:15:
                    21:4f:67:e2:67:80:a0:e2:57:2c:5a:07:97:c8:ec:
                    e6:b0:ce:06:fa:4f:67:76:95:a7:af:fe:a3:a7:bc:
                    f6:39:84:7e:09:ee:92:c4:9d:ed:6c:4a:18:4b:a8:
                    63:d7:e3:86:95:fc:52:c7:a2:35:bd:52:ae:89:55:
                    34:97:34:3b:b3:aa:72:66:c8:33:aa:5f:c6:0d:04:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:89:75:7A:AC:AA:FD:A3:9E:94:A5:7B:B7:32:EC:AD:66:63:5C
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:4e:b1:9e:a4:27:1f:24:4c:5c:3d:fd:04:72:66:7c:43:
         a0:3e:a2:d8:20:a9:7d:cf:c6:54:5f:cf:44:96:ac:ff:d5:4b:
         0e:13:cc:3e:73:b8:58:62:72:83:d7:43:7c:a7:f9:e3:b9:c6:
         0f:5b:9c:b1:13:f6:bc:f7:26:11:b4:0f:c1:1f:2e:1d:ee:54:
         79:81:38:40:e6:d0:bc:c6:4a:b6:ec:ac:db:ea:a5:a9:0a:14:
         fb:7b:3c:ff:7c:50:27:35:ca:6b:0d:3c:f5:44:0b:0b:e4:86:
         c5:a6:f1:1a:a2:e5:88:08:25:ac:6b:26:cd:34:49:5f:e6:6f:
         c7:ed:bc:58:be:6a:53:f2:a5:67:1c:1b:06:a1:54:de:ee:d9:
         67:6f:03:bb:9b:9c:59:59:8a:f3:3e:61:61:fb:9b:98:63:19:
         67:33:29:20:54:e2:36:e7:ee:dd:8c:e0:3d:71:8a:1a:94:2e:
         25:86:01:14:03:2b:17:01:a3:d9:17:2a:3c:fa:eb:48:b6:9e:
         7c:36:ad:a9:67:e8:84:1a:9a:84:98:99:6c:35:61:eb:90:d8:
         93:1f:35:30:9b:e9:c5:b7:8f:1a:c8:7a:b7:e7:4a:3a:98:95:
         a6:8b:68:9e:d1:c8:f0:9b:d7:f3:7e:b8:17:c5:72:8e:1f:8d:
         0b:49:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org